In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix out-of-bound read in smb2_write
ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If ->NextCommand is bigger than Offset + Length of smb2 write, It will allow oversized smb2 write length. It will cause OOB read in smb2_write.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-6.2.0-1009-starfiveUpgrade linux-image-6.2.0-1008-starfiveUpgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-6.2.0-1016-azure-fdeUpgrade linux-image-6.2.0-36-genericUpgrade linux-image-6.2.0-1016-azureUpgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-6.2.0-1015-oracleUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1049-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-6.2.0-1016-raspiUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-awsUpgrade linux-image-starfiveUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.2.0-1016-lowlatency-64kUpgrade linux-image-6.2.0-1015-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-6.2Upgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1018-gcpUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.2.0-1016-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1047-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.2.0-36-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.2.0-1016-kvmUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-86-genericUpgrade linux-image-6.2.0-36-generic-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-azure-fde | Oct 6, 2023 | Oct 4, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub